ZDI-CAN-21705: Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2023-47066

Summary

Adobe After Effects versions 24.0.2 and earlier, including 23.6 and earlier, have a vulnerability related to out-of-bounds reads that occurs during the parsing of specially crafted files. This could allow an attacker to read beyond the allocated memory space, potentially leading to arbitrary code execution within the context of the user. It’s important to note that successful exploitation requires user interaction, as the malicious file must be opened by the victim.

References